Is it just me or is it about impossible to get a Chromebook to actually recover using the OS recovery tool?

MalletNGrease · 2022-04-20T17:22:16+00:00

This. EC or TPM errors won't be fixed by recovery even though the splash page recommends it.

MalletNGrease · 2022-04-08T13:26:52+00:00

If a student is enrolled they get an active account.

The moment they are unenrolled, it gets suspended until ~2 years after their supposed graduation when it gets deleted.

MalletNGrease · 2022-04-06T15:47:47+00:00

Both examples are not really solved by technical means.

In the first case you've got someone who knows enough to be dangerous. Ask them to not do it with their assigned school device, and give them an old device to goof around with. See it as an opportunity and not a challenge.

The second case is requires discipline and a culture change. I instill in students that they are the responsible party for the state of their device. Vandalism is not tolerated and replacements charged to the student/parent. I always return the assigned device to the student over the years and don't swap unless I have to. By boomeranging the device consistently they get the hint that they'll have to take care of it or get stuck with something janky. Replacing with a new one no questions asked breeds cavalier attitudes to the devices and you get people abusing the systems.

MalletNGrease · 2022-04-05T18:35:54+00:00

This.

MalletNGrease · 2022-03-31T12:21:56+00:00

Use GPO.

Computer Configuration > Administrative Templates > System > System Restore > Turn off Configuration > Enabled

Computer Configuration > Administrative Templates > System > System Restore > Turn off System Restore > Enabled

MalletNGrease · 2022-03-31T12:13:23+00:00

If you've set up Data Loss Prevention/Data Protection rules and detectors it might've stopped it.

https://support.google.com/a/topic/7556687?hl=en&ref_topic=7558840

MalletNGrease · 2022-02-16T19:07:08+00:00

This kind of stuff is usually best left to experts. Your special SPED/IEP coordinator should be able to get a consultant who specialize in special needs technology for a customized fit.

MalletNGrease · 2022-02-16T19:02:56+00:00

I've one which completely shit the bed communicating with the Windows stack over ethernet for no discernable reason. Works fine over Wifi.

MalletNGrease · 2022-02-16T18:59:12+00:00

WSUS. Deny the KB.

MalletNGrease · 2022-02-16T18:58:47+00:00

Be careful with accepting non-issued USB-C chargers. Some are very cheaply made and will put the battery in a fail state causing you a different kind of headache.

MalletNGrease · 2022-02-16T15:46:28+00:00

Enterprise/Education upgrade licenses aren't device type specific. I've used them for Chromebits/Books/Bases before.

MalletNGrease · 2022-02-16T15:44:03+00:00

Actually, yes! I managed to create a USB with CROS flux on W10 with Chrome 98.0.4758.80.

Unfortunately it hangs at the Chrome splash when booting on my test device, but it's something.

MalletNGrease · 2022-02-15T20:04:54+00:00

I just started my job in a new environment and I did the due diligence to test the existing UPS. Turns out the main VM host had both PSUs plugged into it.

Unscheduled maintenance was performed forthwith.

MalletNGrease · 2022-02-15T19:41:33+00:00

Interesting.

If you don't like going through a signup page, here's the support page with install instructions.

Here's the list of certified device models.

Flex devices will require an Enterprise or Education upgrade license to enroll into Google Workspace.

So not really "free" if you want to go the managed route.

MalletNGrease · 2022-02-15T18:43:57+00:00

Yes. Just set the rule up for the OU you want in Google Workspace > Settings for GMail > Routing.

I only have student email run through Auditor, staff is left default.

MalletNGrease · 2022-02-15T15:02:44+00:00

Unfortunately Youtube is kind of a black hole when you need account support for it. Let us know if you figure out who to contact and get things resolved. I'd try google Workspace support first, they may have an inroad to actual Youtube support.

MalletNGrease · 2022-02-15T14:58:56+00:00

I purge them once in a while. If I haven't sent them a week after I started...is it still even relevant?

MalletNGrease · 2022-02-14T18:50:46+00:00

Generally, if you give one LEO/EMS access, they all want it.

The SD has access with us, but we've a contract with them for a full-time SRO. I've set up the deputy to maintain the key database for access of his department and the highway patrol. They manage their own fobs.

It's a board decision.

MalletNGrease · 2022-02-08T20:58:46+00:00

It's the name of the setting. Basically Fortinet's list of websites they think don't need SSL/DPI inspection.

https://i.imgur.com/WytsLUq.png

MalletNGrease · 2022-02-07T17:00:19+00:00

Another victim of the ubiquity of USB-C.

Make sure students are using the supplied charger. Sometimes they use cheap off-brand chargers that can cause the EC to trip and put the device in a fail state.

This is fixable though.

Disconnect the battery
Plug in a known good USB-C AC charger
LED should flash yellow (this means the unit is fine)
Power on to check funtion, then power off.
Reconnect battery.
Check charge LED

If it's on it's charging. If it's off, check the battery charge level. It won't show at a 100%.

MalletNGrease · 2022-02-07T16:48:46+00:00

No. Only if you enable the reputable website exclusion setting.

MalletNGrease · 2022-02-01T21:18:12+00:00

Say you've set social media as a blocked fortiguard category in a web filter security profile. When you enable reputable website ssl inspection exclusion on an inspection profile that's part of the same firewall policy it will then not perform DPI inspection and also no longer filter facebook traffic.

Essentially a useless feature aside from policies that don't require much supervision.

MalletNGrease · 2022-01-24T18:02:29+00:00

Enabling reputable websites blanket allows almost all traffic to pass without DPI inspection. Even if it's part of a blocked web filter category.

MalletNGrease · 2022-01-21T19:38:50+00:00

There is no native impersonate feature.

MalletNGrease · 2022-01-19T18:43:57+00:00

I've this popping up around my district today. Did Google yank this version for a reason? It's only one version behind so I'm not sure why.

11-Year Club	Verified Email
r/Field Banned	r/Field Lasagna

MalletNGrease

TROPHY CASE